Dell 2.3 manual Server Security Settings For Deployment, Enabling a Deployable Server White List

Page 29

Server Security Settings For Deployment

Restrict the set of deployable servers using a white list. If a server is in the white list, it is provided with credentials during the Auto-Discovery and handshake process and is displayed in the list of servers that are used for deployment. The white list is maintained by manually adding server service tags, deleting service tags, or importing a list of service tags from a CSV file.

NOTE: Use a CSV-delimited file to import servers. This contains multiple records on different lines where each record has one or more service tags separated by commas.

To set up and manage white lists choose from the following:

Enabling A Server White List

Adding Servers To A White List

Deleting Servers From A WhiteList

Enabling A Deployable Server White List

For information about security settings for deployable servers, see Server Security Settings For Deployment. To enable a server white list:

1.In the Dell Management Center, in the left pane, select Settings.

2.In the right-pane, select Security.

3.In the Security window, click Edit.

4.To use the white list to restrict server deployment, select the Enforce Server White List check box.

5.Click Apply, and the server white setting changes to ENABLED.

Adding Deployable Servers To A White List

For information about security settings for deployable servers, see Server Security Settings For Deployment. When enforced, only Dell servers on the Server White List are available for deployment using the OpenManage Integration for VMware vCenter. You can add deployable servers to a white list manually or import using a list.

To add deployable servers to a white list:

1.In the Dell Management Center, in the left pane, select Settings Security.

2.In the Server White List window, click Edit, then do one of the following:

To add servers to the white list manually, click Add Server.

In the Add Service Tags, dialog , enter the service tags.

To add the tags, click Continue.

To import a list of service tags, click Import White List.

When the Select File to Upload dialog box displays, navigate to the CSV file and click Open. For an example white list:

ASDFG12

SDCNRD0

TESCVD3

AS243AS, ASWERF3, FGVCSD9

When the We found these service tags in your file dialog displays, click Apply.

The service tags are now displayed in the Service Tag list.

29

Image 29
Contents Page Page Contents Hardware Management End-To-End Hardware ManagementViewing Or Editing Hypervisor Profiles Console AdministrationConfiguring Network Settings Troubleshooting101 104 OpenManage Integration for VMware vCenter Key FeaturesInventory Dell platformsOpenManage Integration for VMware vCenter Features Data Integrity Security Roles and PermissionsDell Operation Role Access Control Authentication, Authorization, And RolesDell Infrastructure Deployment Role Dell.InventoryDell.Deploy Understanding PrivilegesPage Page Configuration Tasks Using the Configuration Wizard Creating a New Connection Profile Wizard Configuration Wizard WelcomeOpenManage Integration for VMware vCenter Home Configuring Events And Alarms Wizard Enter the Proxy Port number Setting Up a Proxy Server WizardScheduling Inventory Jobs Wizard Configuring the Deployment Credentials Wizard Running a Warranty Retrieval Job WizardEnabling The Omsa Link Wizard Setting The Default Firmware Update Repository WizardGeneral Settings Overview Configuring NFS SharesSettings Overview Creating a New Connection Profile Enabling The Omsa Link Outside the Configuration WizardEnable or Disable Server Warranty Expiration Notification To create a new connection profile Configuring Events And Alarms Setting Up a Proxy Server About Proxy ConfigurationUsing The Http Proxy For Retrieving Web Based Data Running a Warranty Retrieval JobDell Management Center, select Settings → Warranty Schedule Running Inventory JobsViewing or Editing Deployment Credentials Setting Up The Firmware RepositoryDell Online Shared Network Folder Click Begin TestAdding Deployable Servers To a White List Server Security Settings For DeploymentEnabling a Deployable Server White List Running The Fix Non-Compliant vSphere Hosts Wizard About Host, Bare Metal, and iDRAC Compliance IssuesDeleting Deployable Servers From a White List Related InformationRunning The Fix Non-Compliant Bare Metal Server Wizard Re-checking Bare Metal Server Compliance Downloading An ISO For Manual Firmware UpdatesIDRAC License Compliance Upgrading From a Trial Version To a Full Product Version Upgrading OpenManage Integration for VMware vCenterAbout OpenManage Integration for VMware vCenter Licensing Configure Snmp Omsa trap destinations, if needed Understanding Events And AlarmsMonitoring the Datacenter And Host System Event DescriptionDeploying the Omsa Agent onto an ESX System Understanding Omsa For 11th Generation Dell PowerEdge HostsClick Apply Changes Deploying The Omsa Agent Onto An ESXi SystemHost Information VSphere Client Host OverviewViewing Events Management Consoles Dell Online ServicesHost Actions Under Host Actions, select iDRAC Reset Resetting iDRACAbout Inventory Schedule Modifying An Inventory Job ScheduleDisplaying The Inventory For a Single Host System in vCenter To update the Details of Last Inventory Job, click RefreshInventory And Licensing Viewing Storage Inventory Viewing Host Power MonitoringManaging Connection Profiles Viewing Or Editing An Existing Connection Profile Deleting a Connection Profile Testing a Connection ProfileDisplaying Logs in Dell Management Center Understanding System Event Logs In vSphere Client Host ViewRefreshing a Connection Profile Displaying The Event Logs For An Individual Host About Firmware UpdatesDell ftp.dell.com Shared NetworkSelect Update from repository Running The Firmware Update WizardFirmware Versions After October 14 Firmware Versions Older than July 29Updating Older Firmware Versions Enter maintenance mode, apply updates, and restartApply updates on next reboot Click Update Firmware Viewing Firmware Update Status for Clusters and Datacenters Advanced Host Management Using vCenterWarranty Retrieval Setting Up Physical Server Front Indicator LightUnder Host Actions, select Blink Indicator Light Server Based Management ToolsViewing Server Warranty Information For a Single Host Prerequisites Hardware ManagementServer States Within The Deployment Sequence Provisioning OverviewUnderstanding Deployment Job Times Downloading Custom Dell ISO Images Understanding How To Configure a Hardware ProfileCreating a New Hardware Profile ConfigurationPage Enabling Csior On a Reference Server Cloning a Hardware ProfileLocally RemotelyViewing Or Editing a Hardware Profile About Managing Hardware ProfilesDuplicating a Hardware Profile Renaming a Hardware ProfileCreating a New Hypervisor Profile Refreshing An Updated Hardware ProfileVlan Support Managing Hypervisor ProfilesDuplicating a Hypervisor Profiles Viewing Or Editing Hypervisor ProfilesRenaming Hypervisor Profile Building a New Deployment TemplateDeleting a Hypervisor Profile Refreshing Hypervisor ProfilesDuplicating Deployment Templates Running The Deployment WizardDeleting a Deployment Template Renaming a Deployment TemplateDeployment Wizard Deployment Templates Deployment Wizard Global SettingsDeployment Wizard Select Servers Deployment Wizard Server Identification Deployment Wizard Scheduling Jobs Deployment Wizard Connection ProfileUnderstanding Job Queue Click Schedule servers for deploymentOn the Select Server tab, click Add Server Managing Deployment Jobs Using The Deployment Job QueueAdding a Server Manually Click Remove Selected Servers Removing a Bare Metal ServerOn the Select Servers tab, click Remove Servers Registering a vCenter Server Web-based Administration ConsoleManaging vCenter Server Connections Click Register OpenManage Integration for VMware vCenter RequirementsVersions of ESXi that should be supported on hosts managed VCenter sSupportUpdating The SSL Certificates For Registered vCenter Servers Modifying The vCenter Administrator LoginUpdating a Repository Location And Virtual Appliance Virtual Appliance ManagementRestarting The Virtual Appliance Setting Up The Http Proxy Downloading the Troubleshooting BundleSetting Up the NTP Servers Updating the Virtual Appliance Software VersionClick Restore Default Certificate for Https Certificates Restoring the Default Https CertificateGenerating a Certificate Signing Request Uploading an Https CertificateConfiguring Backup And Restore Setting up Global AlertsManaging Backup And Restore Performing An Immediate Backup Scheduling Automatic BackupsRestoring The Database From a Backup Click Backup NowChanging The Virtual Appliance Password Configuring Network SettingsEnter the Current Admin Password and press Enter Understanding the vSphere Client ConsoleRebooting Virtual Appliance Setting The Local Time ZoneResetting The Virtual Appliance To Factory Settings Refreshing the Console ViewMigration Path to migrate from 1.6/1.7 to Power on the OpenManage Integration version 2.3 applianceFrequently Asked Questions FAQ TroubleshootingVersion Affected All Firmware link communication error FTP TCP Rmcp UDP/TCP Select Temperatures under Main System Chassis Select the Enable Platform Event Filter Alerts check boxWhen I tried to use lockdown mode, it failed Go to https//vcenterserverIPAddress/mob Set UserVars.CIMoemProviderEnabled toHow Do I Force Removal of the Virtual Appliance? My vCenter Registration Failed. What Can I Do? My Firmware Update Failed. What Do I Do?Hardware Configuration Failure Bare Metal Deployment IssuesEnabling Auto-Discovery On a Newly Purchased System Auto-Discovery and Handshake PrerequisitesContacting Dell Event Name Description Severity Virtualization-related Events For Dell PowerEdge ServersNo action Dell Memory Device Dell Processor sensor Error Threshold value Independent error condition Dell Storage Controller Dell Storage Array disk Array disk warning Dell Watchdog Power Watchdog Power cycle Error Module information Information Dell Integrated Dual SD Auto-Discovery Prerequisites Understanding Auto-DiscoveryYou must have the iDRAC and host IP addresses Log in to the Integrated Dell Remote Access Controller GUIEnter the iDRAC IP address into a browser You must have the iDRAC and host IP addresses